Flowers Plumstead Privacy Policy

Our Commitment to Your Privacy

At Flowers Plumstead, we are dedicated to safeguarding and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in connection with orders placed by customers from Plumstead and the surrounding districts. Your trust is important to us, and we are fully committed to complying with the General Data Protection Regulation (GDPR) and all applicable data protection laws.

Who This Policy Applies To

This Privacy Policy applies to all individuals who place orders with Flowers Plumstead, whether in person, over the phone, or via our online platform, within Plumstead and surrounding communities. By ordering from us, you acknowledge that your personal data will be handled in accordance with this policy.

What Personal Data We Collect

In the course of fulfilling your order and providing our services, Flowers Plumstead may collect and process the following categories of personal data:

  • Identification Data: Name, delivery address, and contact details (such as phone number and address of recipient and sender).
  • Order Information: Details of the products or services you have ordered, delivery instructions, and messages to be included with your flowers.
  • Payment Information: Payment method and transaction details. Please note, we do not store full card details; payments are processed securely through our chosen payment processor.
  • Communications: Correspondences relating to your order, such as emails or notes provided for clarification or queries.
  • Technical Data: When you visit our website, we may collect data such as IP address, browser type, and device information through cookies and similar technologies (if applicable).

Lawful Basis for Processing Your Data

Flowers Plumstead only processes your personal data when there is a lawful basis to do so, as defined under the GDPR. The key lawful bases relevant to our business operations include:

  • Contractual Necessity: Processing necessary to fulfill your order or to take steps at your request before entering into a contract. Without this, we would be unable to provide our services.
  • Legal Obligation: Where we must comply with legal and regulatory requirements, such as accountancy and taxation laws.
  • Legitimate Interests: To improve our services, deal with queries or complaints, and carry out limited marketing and customer relationship management within the boundaries of your rights and interests.
  • Consent: We will obtain your explicit consent before processing your data for optional communications, such as newsletters or promotions. You may withdraw consent at any time.

How We Use Your Personal Data

Your data is used strictly for the purposes of processing and delivering your floral orders and related customer service. Specific purposes include:

  • Fulfilling and delivering your order to the correct address.
  • Contacting you for order confirmation or clarification.
  • Processing your payment securely via our payment processor.
  • Providing customer support for questions or complaints.
  • Complying with legal and financial recordkeeping obligations.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Use of Processors and Third Parties

Flowers Plumstead may engage third-party service providers or processors to facilitate aspects of our service, including payment processing, order management systems, IT hosting, and website analytics. All processors are carefully selected and bound by contractual terms requiring them to comply with data protection laws and to process your data only as instructed by us.

We ensure that your data is never transferred outside the UK or European Economic Area (EEA) unless adequate safeguards are in place, in compliance with GDPR requirements.

How Long We Retain Your Data

Personal data is retained only as long as is necessary for the purposes for which it was collected:

  • Order data and correspondence are kept for up to 7 years to comply with tax, accounting, and legal obligations.
  • Payment information (beyond transaction records) is not stored by Flowers Plumstead, as all payments are managed through secure third-party processors.
  • Marketing consents are reviewed regularly, and you can unsubscribe or withdraw consent at any time.
  • Web analytics data is kept for a maximum of 2 years, after which it is securely deleted or anonymized.

Your Rights Under the GDPR

As a customer of Flowers Plumstead, you have the following rights with respect to your personal data:

  • Right to Access: You may ask for confirmation of whether we process your data, and request a copy of your personal data.
  • Right to Rectification: If your data is inaccurate or incomplete, you have the right to request corrections.
  • Right to Erasure: In certain circumstances, you may request deletion of your data. Some legal obligations may limit this right.
  • Right to Restrict Processing: You may ask us to suspend processing of your data in specific scenarios.
  • Right to Data Portability: Where technically possible, you can request that we provide your data in a structured, commonly-used, and machine-readable format.
  • Right to Object: You may object to processing based on legitimate interests, direct marketing, or automated decision making.
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw this at any time.

To exercise your rights, please contact us using the details provided on our website or by post. We will respond to your request in accordance with legal requirements. If you are dissatisfied with our handling of your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

How We Protect Your Data

Flowers Plumstead implements technical and organisational measures to ensure your data is securely stored, processed, and transmitted. This includes secure payment gateways, encryption, access controls, and staff training in data protection. We regularly review our security measures to uphold your privacy.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. Please review this policy periodically. Continued use of our services signifies your acceptance of any changes.

Contacting Us

If you have questions regarding this Privacy Policy or how we manage your personal data, please refer to the contact details available on our website. We are committed to addressing your queries promptly and in accordance with data protection laws.